Factorization of a 768-bit RSA modulus

[Fedor Brunner]

ssh-keygen.c contains condition

     else if (type != KEY_ECDSA && type != KEY_ED25519 && *bitsp < 768)
             fatal("Key must at least be 768 bits");

Please increase the minimal RSA key length.


https://eprint.iacr.org/2010/006
This paper reports on the factorization of the 768-bit number RSA-768 by
the number field sieve factoring method